tarballs.nixos.org is omitted from the change because urls from there are always hashed and checked
systemd.users